school event management system vulnerabilities and fixes

Recent CVEs affecting school event management system, with upgrade or downgrade steps. 31 tracked.

Also searched as: schooleventmanagementsystem.

school event management system has 31 tracked vulnerabilities, 17 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-08-06. Highest priority: CVE-2018-18793 (score 68/100).

• CVE-2024-33994 HIGH 7.1 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0
• CVE-2024-33993 HIGH 7.1 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0
• CVE-2024-33992 HIGH 7.1 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0
• CVE-2024-33991 HIGH 7.1 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0
• CVE-2024-33990 HIGH 7.1 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0
• CVE-2024-33989 HIGH 7.1 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0
• CVE-2024-33988 HIGH 7.1 DOWNGRADE DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management Sy
• CVE-2024-33987 HIGH 7.1 DOWNGRADE DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management Sy
• CVE-2024-33986 HIGH 7.1 DOWNGRADE DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management Sy
• CVE-2024-33985 HIGH 7.1 DOWNGRADE DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management Sy
• CVE-2024-33984 HIGH 7.1 DOWNGRADE DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management Sy
• CVE-2024-33983 HIGH 7.1 DOWNGRADE DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management Sy
• CVE-2024-33982 HIGH 7.1 DOWNGRADE DOWNGRADE Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management Sy
• CVE-2024-33974 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33973 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33972 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33971 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33970 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33969 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33968 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33967 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33966 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33965 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33964 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33963 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33962 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33961 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2024-33959 CRITICAL 9.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0
• CVE-2018-18795 CRITICAL 9.8 DOWNGRADE School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter
• CVE-2018-18794 HIGH 8.8 DOWNGRADE School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
• CVE-2018-18793 CRITICAL 9.8 DOWNGRADE School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.

FAQ

How do I fix school event management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is school event management system being exploited right now?

None of the tracked school event management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which school event management system CVE should I patch first?

CVE-2018-18793 currently ranks highest (68/100): School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos..

RSS feed for school event management system · ← Back to latest CVEs